Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3R02wtGck8OQWxm-u_iEIrYKD-g.cer
File: 3R02wtGck8OQWxm-u_iEIrYKD-g.cer (raw, json)
Hash identifier: n6m9EJA3503lzL7TTh+kGQpfSQW4qcwwHY6retkfXpk=
Subject key identifier: DD:1D:36:C2:D1:9C:93:C3:90:5B:19:BE:BB:F8:84:22:B6:0A:0F:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019706309589A2193494987D4468A3DE6623
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/0/DD1D36C2D19C93C3905B19BEBBF88422B60A0FE8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 25 May 2025 06:45:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199763
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:06:30:95:89:a2:19:34:94:98:7d:44:68:a3:de:66:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 25 06:45:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd1d36c2d19c93c3905b19bebbf88422b60a0fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:09:1a:a3:7c:21:8a:29:20:16:b1:9a:f8:
1d:c2:83:8a:dd:7c:9d:02:a7:10:84:e2:fd:74:17:
35:41:1c:09:bc:07:cd:5a:2f:c4:5b:bc:bd:78:d6:
5f:3d:9c:0c:01:a3:5b:c3:05:82:1e:d7:71:64:ab:
41:4d:0f:d8:36:1e:eb:dc:10:4e:a9:d2:fc:4e:08:
52:c0:dc:ab:4a:82:67:d2:83:4f:13:f8:09:4f:53:
f4:dc:73:ad:13:00:e0:8b:5e:d6:31:56:ca:75:89:
22:87:6b:ee:05:fe:78:ed:0e:97:c1:39:b9:56:29:
6b:9e:49:ea:e1:3c:5c:e1:aa:5f:2e:ba:db:ba:70:
21:33:46:c5:f1:a0:12:61:10:59:ca:49:d6:07:5a:
ab:cf:7f:3f:c2:ea:e4:66:49:06:ac:54:63:47:8f:
76:c2:8d:79:35:cc:b6:5a:2b:28:cd:e7:5c:ea:51:
a9:4a:49:82:73:cb:3f:39:76:78:e7:cb:5d:32:95:
75:71:0e:da:97:a3:ab:53:cb:7f:80:1d:d3:6e:84:
61:2e:14:23:9b:39:ad:4a:cc:2d:e1:c4:88:d5:df:
40:4f:00:d1:69:24:0a:ce:23:26:6f:af:e5:5e:bf:
74:29:42:32:5d:f1:2d:46:51:46:94:b3:8b:c0:b3:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1D:36:C2:D1:9C:93:C3:90:5B:19:BE:BB:F8:84:22:B6:0A:0F:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/0/DD1D36C2D19C93C3905B19BEBBF88422B60A0FE8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199763
Signature Algorithm: sha256WithRSAEncryption
3c:d6:d1:e0:42:f3:da:82:d1:2b:1b:f9:d7:c6:d2:b5:0a:76:
4e:93:02:e7:88:b7:55:00:e2:20:5d:bb:2b:43:78:62:5f:e1:
c9:45:f2:f4:44:fa:bb:af:af:35:0d:29:89:19:a2:36:cb:37:
fc:3a:d2:d5:b8:e6:87:c6:0b:95:a7:90:fe:7a:78:22:57:aa:
ea:16:b0:29:81:e8:f0:51:87:7c:0c:8e:9d:9e:ed:c7:20:e8:
7a:f9:22:15:60:99:2f:4b:aa:01:fc:2a:7d:72:46:1f:cb:c6:
1d:3a:31:8a:22:73:88:2c:70:28:bc:58:d6:13:f3:cf:ea:dd:
43:3a:da:81:11:4b:e6:45:74:be:34:7e:93:de:0e:9b:65:05:
58:f6:1f:d1:14:33:8b:0d:fc:53:f8:83:dc:21:f2:82:c7:dc:
ec:82:7a:bf:37:f8:a0:b0:7f:cd:98:02:63:92:a0:79:a9:b8:
4e:6b:b6:e1:bb:7d:b6:af:4e:2e:d5:22:75:f5:e9:d0:77:69:
ef:b2:d6:d3:33:79:26:75:af:5a:40:57:ea:c2:9e:9f:c8:23:
3e:4b:43:db:4a:6c:27:21:48:38:8d:b9:ae:d1:32:21:c5:38:
27:e2:06:41:2a:dd:df:36:b6:99:65:f3:04:0f:8a:81:83:e3:
49:6c:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:25:59 2025 by rpki-client